Astra Linux - уязвимость в git-lfs

Git LFS is an extension of Git for versioning large files. When Git LFS requests credentials from Git for a remote host, it passes portions of the host’s URL to the git-credential1 command without checking for embedded line-ending control characters. It then sends any credentials it receives back...

git-lfs: Git LFS permits exfiltration of credentials via crafted HTTP URLs

A flaw was found in the Git LFS git extension. When Git LFS requests credentials from Git for a remote host, it passes portions of the host's URL to the git-credential1 command without checking for embedded line-ending control characters and then sends any credentials it receives back from the Gi...

PYSEC-2023-93

pacparserfindproxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL which may be realistic within enterprise security products...

Pacparser 注入漏洞

Pacparser is a library for parsing Proxy Autoconfiguration PAC files by the individual developer Manu Garg. A security vulnerability exists in versions of Pacparser prior to 1.4.2 that stems from allowing JavaScript injection when an attacker takes control of a URL and may allow privilege...

The vulnerability of Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, and 4800 lies in their lack of control over access to certain URLs. This allows attackers to gain unauthorized access to protected information, compromise data integrity, or cause service failures.

The vulnerability of Cisco Aironet Access Points of models 1540, 1560, 1800, 2800, 3800, and 4800 is related to deficiencies in access control to certain URL addresses. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information,...

Cisco Small Business RV320 and RV325 Information Disclosure Vulnerabilities

The Cisco Small Business RV320 and RV325 are both enterprise-class routers from Cisco USA. An information disclosure vulnerability exists in the web-based management interface of the Cisco Small Business RV320 and RV325 using firmware versions 1.4.2.15 through 1.4.2.19. The vulnerability stems fr...